Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zqrpXJ-ZLbwK_YklZEmPkSivqrw.roa
File: zqrpXJ-ZLbwK_YklZEmPkSivqrw.roa (raw, json)
Hash identifier: DBsFu5i3ur1hoaXqtO4+OdgLynlT6VatzOl/HhSRH1s=
Subject key identifier: CE:AA:E9:5C:9F:99:2D:BC:0A:FD:89:25:64:49:8F:91:28:AF:AA:BC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4256B120E34E1E7513373F320BA0F1A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zqrpXJ-ZLbwK_YklZEmPkSivqrw.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216075
IP address blocks: 163.5.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6b:12:0e:34:e1:e7:51:33:73:f3:20:ba:0f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceaae95c9f992dbc0afd892564498f9128afaabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:af:b2:14:0e:64:7e:03:95:b8:56:8c:1e:
5d:22:1e:22:45:5a:76:61:58:8b:3b:09:c6:8e:51:
37:34:66:4b:5f:b9:68:63:17:44:e0:30:ab:27:e3:
61:f3:fc:b5:ac:3e:23:2e:e0:d2:73:58:e2:38:51:
e5:99:27:bd:65:62:08:f4:3b:02:58:2f:35:cb:f3:
24:72:14:63:57:df:d2:e3:f9:7e:6a:43:15:86:09:
09:74:5d:32:91:70:05:ea:1a:0e:0e:b7:d3:8a:6d:
5b:57:eb:2e:58:6f:01:c7:68:fb:9c:47:ee:12:8a:
e4:d3:23:a6:f9:9b:f8:05:cc:e7:5b:ee:68:c9:c2:
62:42:7d:2b:7a:36:df:b5:b8:05:ed:fc:30:15:2a:
78:38:34:88:4b:af:0e:bd:50:fc:09:19:aa:bb:31:
53:12:ed:fd:dc:b4:28:8b:11:9c:24:45:a4:1e:dc:
0e:39:de:59:40:83:ec:1a:24:dc:ca:6f:03:43:e7:
b3:71:a1:55:e3:8d:a7:9d:41:7d:5b:ba:c5:d4:5a:
13:a0:b6:93:fc:3f:5d:2b:f9:9b:5d:f8:d7:16:61:
b4:46:21:47:54:c5:6d:28:6d:c8:6b:d3:2e:ff:44:
c7:a5:bd:c8:1e:8b:f2:51:da:29:37:a2:2d:33:9f:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:E9:5C:9F:99:2D:BC:0A:FD:89:25:64:49:8F:91:28:AF:AA:BC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zqrpXJ-ZLbwK_YklZEmPkSivqrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7e:a9:a2:e7:11:22:e6:1c:b0:b1:e3:c9:c6:59:18:b7:86:
72:a2:1e:cb:4c:30:11:8e:95:7f:88:10:db:32:3c:02:c3:30:
8b:6a:fe:fe:e1:62:8a:7d:10:b4:02:1a:2f:c8:9b:22:47:fa:
48:e6:d3:46:47:75:63:a8:5b:b8:e0:8e:4a:54:b8:24:ac:3a:
31:1f:4e:64:ff:1c:10:14:d5:80:2e:71:86:9b:10:f8:67:0f:
26:2d:d4:1b:79:c6:1d:0d:71:72:77:57:0c:84:d3:82:aa:7a:
81:64:c6:8f:42:1a:f2:0a:97:6a:47:f8:a4:1f:83:52:62:ae:
a5:1f:b0:ea:e6:4d:9f:8c:ad:f3:68:2c:7c:d1:29:d0:b7:06:
57:1b:b5:46:f5:61:8c:99:0e:7c:4b:32:45:90:95:d4:a7:46:
e6:6b:64:c2:73:1e:cc:7f:b2:44:d1:1f:0c:33:e1:1f:5d:b3:
72:5f:df:27:dd:eb:44:3d:64:d0:43:c4:98:42:ab:25:c2:63:
36:6e:34:fb:47:2b:53:df:72:d5:70:93:2a:9d:df:99:87:a0:
8d:be:8f:63:07:4d:43:1e:10:c4:b1:6a:58:80:6d:94:d7:9a:
71:e2:5a:0c:ca:01:ea:eb:04:50:7a:27:4f:10:75:e0:de:05:
99:bc:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 18:27:18 2024 by rpki-client on console-ams.rpki-client.org